Eastmoney Stock

查询东方财富股票数据，包括个股行情、涨跌幅、成交量等。用于回答股票相关问题。

Security Scan

The skill mostly does what it says (fetches stock data) but has internal inconsistencies and missing runtime requirements that you should review before installing.

Purpose & Capability

The skill name/description claim to use 东方财富 (Eastmoney) for stock data, and scripts/sector_rank.py does call an Eastmoney API. However scripts/stock.py fetches quotes from Sina (hq.sinajs.cn) rather than Eastmoney — a mismatch between stated purpose and implementation. package.json looks like an npm manifest but the code is Python; runtime requirements (python3 and the Python 'requests' library) are not declared. These discrepancies are proportionate to a sloppy implementation but should be clarified.

Instruction Scope

SKILL.md describes using Eastmoney APIs and querying stocks; the code performs only network queries to public financial endpoints (push2.eastmoney.com and hq.sinajs.cn) and prints results. The instructions do not request or access files, environment variables, or unrelated system state. The main scope issue is the SKILL.md's claim of Eastmoney-only data while the stock lookup uses Sina — a scope mismatch but not an obvious malicious action.

Install Mechanism

There is no install spec (instruction-only with included Python scripts), which is low risk. However package.json exists and lists no dependencies while the Python scripts require the 'requests' library and python3 to run; these runtime dependencies are not declared or installed by the skill. That omission can cause surprises at runtime and should be documented or fixed.

Credentials

The skill does not request any environment variables, credentials, or config paths. The network calls go only to well-known public finance endpoints (Eastmoney and Sina) consistent with the tool's stated function.

Persistence & Privilege

always is false and the skill does not attempt to modify agent/system configuration or persist credentials. It appears to run on-demand and only prints query results.

What to consider before installing

This skill appears to fetch public stock data and is not actively malicious, but there are mismatches and missing docs you should consider: 1) The README/description claims Eastmoney-only data while the stock lookup uses Sina—ask the author which source is authoritative. 2) The package is Python but no runtime requirements are declared: you need python3 and the Python 'requests' library to run the scripts. 3) Confirm you are comfortable with the skill making outbound requests to push2.eastmoney.com and hq.sinajs.cn and run it in a sandbox first if possible. 4) Prefer skills that declare exact runtime dependencies and a verifiable source/homepage; if you plan to use this in production, request the upstream repository or a signature from the publisher before installing.

东方财富股票查询

使用东方财富API获取股票数据。

支持的查询类型

• 个股行情：股票代码、现价、涨跌、成交量、成交额
• 涨跌幅排行：当日涨跌幅排名
• 自选股查询：用户关注的股票信息

使用方式

直接问我股票相关问题，例如：

• "600519现在多少钱？"（查询茅台股价）
• "今天涨幅最高的股票"
• "帮我查一下腾讯的股票"
• "A股今天怎么样？"

注意事项

• 支持A股、港股、美股
• 港股代码加.HK，美股代码加.N
• 数据有几分钟延迟